Question 1

A Solutions Architect needs to design a centralized logging solution for a group of web applications running on Amazon EC2 instances. The solution requires minimal development effort due to budget constraints. Which of the following should the Architect recommend?

Accepted Answer

Installing and configuring Amazon CloudWatch Logs agent on EC2 instances allows for centralized logging with minimal development effort, as it automatically collects and sends log data to CloudWatch Logs.

Question 2

A Solutions Architect is building an online shopping application where users will be able to browse items, add items to a cart, and purchase the items. Images of items will be stored in Amazon S3 buckets organized by item category. When an item is no longer available for purchase, the item image will be deleted from the S3 bucket. Occasionally, during testing, item images deleted from the S3 bucket are still visible to some users. What is a flaw in this design approach?

Accepted Answer

Amazon S3 DELETE requests are eventually consistent, which may cause other users to view items that have already been purchased

Question 3

A business team requires a structured storage solution to store all of a company's historical sales data. Currently there are 4 TB of data, which will grow to hundreds of terabytes within a few years. The team must be able to regularly run queries against the data using current business intelligence tools. Fast performance is required despite the dataset growth. Which solution should the company use?

Accepted Answer

Amazon Redshift is a fully managed data warehouse service that is optimized for fast query performance on large datasets, making it suitable for storing and querying historical sales data that will grow significantly over time.

Question 4

A Solutions Architect must design a web application that will be hosted on AWS, allowing users to purchase access to premium, shared content that is stored in an S3 bucket. Upon payment, content will be available for download for 14 days before the user is denied access. Which of the following would be the LEAST complicated implementation?

Accepted Answer

Using CloudFront with signed URLs and setting a 14-day expiration for the URI is the least complicated solution, as it directly aligns with the requirement of providing access for 14 days without needing additional logic to track or remove data.

Question 5

A customer is deploying a production portal application on AWS. The database tier has structured data. The company requires a solution that is easily manageable and highly available. How can these requirements be met?

Accepted Answer

Amazon RDS with a multiple Availability Zone option provides an easily manageable and highly available solution for structured data, as it automatically replicates the database across multiple Availability Zones.

Question 6

A photo-sharing website running on AWS allows users to generate thumbnail images of photos stored in Amazon S3. An Amazon DynamoDB table maintains the locations of photos, and thumbnails are easily re-created from the originals if they are accidentally deleted. How should the thumbnail images be stored to ensure the LOWEST cost?

Accepted Answer

Storing thumbnails in Amazon S3 provides low-cost storage and easy access, without the additional costs associated with infrequent access or cross-region replication.

Question 7

A Solutions Architect is reviewing an application that writes data to an Amazon DynamoDB table on a daily basis. Random table reads occur many times per second. The company needs to allow thousands of low-latency reads and avoid any negative impact to the rest of the application. What should the Solutions Architect do to meet the company's goals?

Accepted Answer

The answer of A Solutions Architect is reviewing an application...

Question 8

A company has a website running on Amazon EC2. The application DNS name points to an Elastic IP address associated with the EC2 instance. In the event of an attack on the website coming from a specific IP address, the company wants a way to block the offending IP address. Which tool or service should a Solutions Architect recommend to block the IP address?

Accepted Answer

AWS WAF (Web Application Firewall) is designed to protect web applications from common web exploits and allows you to create rules to block specific IP addresses.

Question 9

You are building a product on top of Google Kubernetes Engine (GKE). You have a single GKE cluster. For each of your customers, a Pod is running in that cluster, and your customers can run arbitrary code inside their Pod. You want to maximize the isolation between your customers' Pods. What should you do?

Accepted Answer

Using gVisor provides an additional layer of security by sandboxing the containers, which helps in maximizing isolation between customers' Pods.

Question 10

A Solutions Architect is designing a high-performance computing job that runs on Amazon EC2 instances in private subnets. To allow the application to download patches, the infrastructure must be altered to allow the instances to access external endpoints. Any changes to the infrastructure must involve minimal ongoing systems management effort. What will allow the EC2 instances to access the endpoint while meeting these requirements?

Accepted Answer

A NAT gateway allows instances in a private subnet to connect to the internet or other AWS services, while preventing the internet from initiating a connection with those instances. It requires minimal ongoing management.

Question 11

A company has many applications on Amazon EC2 instances running in Auto Scaling groups. Company policies require that data on the attached Amazon EBS volume must be retained. Which actions will meet this requirement without impacting performance?

Accepted Answer

Disabling DeleteOnTermination for the Amazon EBS volumes ensures that the data on the EBS volumes is retained even when the EC2 instances are terminated, aligning with the company's policy requirements.

Question 12

Users submit requests to a service that takes several minutes to process. A Solutions Architect needs to ensure that these requests are processed at least once, and that the service has the ability to handle large increases in the number of requests. How should these requirements be met?

Accepted Answer

Amazon SQS ensures that messages are processed at least once and can handle large increases in the number of requests by scaling the number of EC2 instances polling the queue.

Question 13

A website keeps a record of user actions using a globally unique identifier (GIUD) retrieved from Amazon Aurora in place of the user name within the audit record. Security protocols state that the GUID content must not leave the company's Amazon VPC. As the web traffic has increased, the number of web servers and Aurora read replicas has also increased to keep up with the user record reads for the GUID. What should be done to reduce the number of read replicas required while improving performance?

Accepted Answer

Using Amazon ElastiCache for Redis allows for fast, in-memory data storage and retrieval, reducing the load on the database and minimizing the need for additional read replicas.

Question 14

You built an application on Google Cloud that uses Cloud Spanner. Your support team needs to monitor the environment but should not have access to table data. You need a streamlined solution to grant the correct permissions to your support team, and you want to follow Google-recommended practices. What should you do?

Accepted Answer

The answer of You built an application on Google Cloud...

Question 15

A customer has a legacy application with a large amount of data. The files accessed by the application are approximately 10 GB each, but are rarely accessed. However, when files are accessed, they are retrieved sequentially. The customer is migrating the application to AWS and would like to use Amazon EC2 and Amazon EBS. What is the Least expensive EBS volume type for this use case?

Accepted Answer

The answer of A customer has a legacy application with...

Question 16

A company has an application that generates invoices and makes the invoices available online. Invoices are stored as PDFs in an Amazon S3 bucket. Customers typically only view each invoice during the month it is issued. However, past invoices need to be immediately available. There are concerns over rising storage costs as the company gains more customers. What is the MOST cost-effective method to store the data?

Accepted Answer

The answer of A company has an application that generates...

Question 17

Your organization has strict requirements to control access to Google Cloud projects. You need to enable your Site Reliability Engineers (SREs) to approve requests from the Google Cloud support team when an SRE opens a support case. You want to follow Google-recommended practices. What should you do?

Accepted Answer

The answer of Your organization has strict requirements to control...

Question 18

A Solutions Architect is designing a three-tier web application that will allow customers to upload pictures from a mobile application. The application will then generate a thumbnail of the picture and return a message to the user confirming that the image was successfully uploaded. Generation of the thumbnail may take up to 5 seconds. To provide a sub second response time to the customers uploading the images, the Solutions Architect wants to separate the web tier from the application tier. Which service would allow the presentation tier to asynchronously dispatch the request to the application tier?

Accepted Answer

The answer of A Solutions Architect is designing a three-tier...

Question 19

A customer is running a critical payroll system in a production environment in one data center and a disaster recovery (DR) environment in another. The application includes load-balanced web servers and failover for the MySQL database. The customer's DR process is manual and error-phone. For this reason, management has asked IT to migrate the application to AWS and make it highly available so that IT no longer has to manually fail over the environment. How should a Solutions Architect migrate the system to AWS?

Accepted Answer

The answer of A customer is running a critical payroll...

Question 20

What conditions could cause a Multi-AZ Amazon RDS failover to occur? (Choose two.)

Accepted Answer

A Multi-AZ Amazon RDS failover occurs when an Availability Zone becomes unavailable or when there is a failure of the primary database instance, ensuring high availability and durability.

Exam 8: GSuite

A Solutions Architect needs to design a centralized logging solution for a group of web applications running on Amazon EC2 instances. The solution requires minimal development effort due to budget constraints. Which of the following should the Architect recommend?

A customer is deploying a production portal application on AWS. The database tier has structured data. The company requires a solution that is easily manageable and highly available. How can these requirements be met?

A company has many applications on Amazon EC2 instances running in Auto Scaling groups. Company policies require that data on the attached Amazon EBS volume must be retained. Which actions will meet this requirement without impacting performance?

Users submit requests to a service that takes several minutes to process. A Solutions Architect needs to ensure that these requests are processed at least once, and that the service has the ability to handle large increases in the number of requests. How should these requirements be met?

What conditions could cause a Multi-AZ Amazon RDS failover to occur? (Choose two.)